Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/90debbfe8af1c02878c4cb142b61ae87a687e821.roa
File:                     90debbfe8af1c02878c4cb142b61ae87a687e821.roa (raw, json)
Hash identifier:          92bgEz8poDb1AkXaCfSWa8kqRvW6simI2Fjq8Mx9LaE=
Subject key identifier:   B3:7D:B4:25:07:04:89:0E:A6:F6:B8:43:67:B0:80:73:CF:80:62:FB
Certificate issuer:       /CN=fb5dac75b816b6728a9f5aba0300386dab0d1cca
Certificate serial:       0DAD7E
Authority key identifier: 9D:58:1B:E5:9D:72:81:73:B1:8B:53:0A:F2:D6:CA:A9:3D:44:F0:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb5dac75b816b6728a9f5aba0300386dab0d1cca.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/90debbfe8af1c02878c4cb142b61ae87a687e821.roa
Signing time:             Wed 24 Mar 2021 14:30:36 +0000
ROA not before:           Wed 24 Mar 2021 14:30:36 +0000
ROA not after:            Tue 24 Mar 2026 14:30:36 +0000
asID:                     265690
IP address blocks:        2801:13:d000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896382 (0xdad7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5dac75b816b6728a9f5aba0300386dab0d1cca
        Validity
            Not Before: Mar 24 14:30:36 2021 GMT
            Not After : Mar 24 14:30:36 2026 GMT
        Subject: CN=90debbfe8af1c02878c4cb142b61ae87a687e821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:ba:a1:12:5e:0c:47:ac:5f:6f:e9:76:2e:
                    33:79:e7:80:d6:29:4a:bc:be:d6:4f:71:fc:45:df:
                    99:7e:ab:23:9a:b8:7d:48:7e:22:09:5a:b3:cb:c1:
                    69:d7:79:71:ba:a1:e9:b2:7b:85:09:52:36:fa:e0:
                    44:0e:2b:32:b5:37:48:31:3d:7c:d2:b5:19:e5:c2:
                    ee:a5:93:e0:97:59:df:97:97:25:d9:8b:9d:a2:54:
                    cd:02:34:68:8b:59:30:65:82:0b:e7:5f:88:26:2d:
                    93:09:21:67:75:33:1f:85:a3:bb:e6:92:6c:d3:0b:
                    78:e6:dd:4c:0a:b5:a4:25:a4:13:12:2f:09:00:09:
                    32:59:5b:32:f2:c0:44:62:1f:69:3a:d4:c0:e0:a2:
                    27:d2:47:9d:2a:60:98:4c:f8:49:69:e9:e6:1a:6d:
                    0a:51:82:3c:09:bc:0a:27:ea:ed:93:f1:78:a3:5b:
                    fa:f3:b2:3a:71:5e:80:4d:be:07:86:f9:4f:13:c1:
                    44:3e:c5:45:9b:0a:77:26:68:d3:4f:3a:48:ce:ba:
                    80:a7:db:65:00:fb:08:63:12:0d:d6:b9:24:ce:22:
                    e4:f0:24:3d:75:3d:39:bc:79:bc:19:61:82:6c:34:
                    80:c4:aa:ad:19:e4:0a:4b:a2:cd:c3:b5:d5:4a:22:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:B4:25:07:04:89:0E:A6:F6:B8:43:67:B0:80:73:CF:80:62:FB
            X509v3 Authority Key Identifier:
                keyid:9D:58:1B:E5:9D:72:81:73:B1:8B:53:0A:F2:D6:CA:A9:3D:44:F0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb5dac75b816b6728a9f5aba0300386dab0d1cca.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/90debbfe8af1c02878c4cb142b61ae87a687e821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77e2b0ce-5e5f-483b-8717-15744c842b43/fb5dac75b816b6728a9f5aba0300386dab0d1cca.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:1a:06:44:b6:2d:40:ac:c7:76:c5:ca:c7:d5:92:5c:20:
         e8:44:9a:dc:00:0c:1b:07:ee:13:9c:93:ec:92:bf:7d:1b:08:
         50:65:eb:88:f2:f1:d8:d1:c0:8a:f9:ad:3b:5a:ce:f8:fd:7e:
         42:48:a4:77:95:6b:24:6a:8c:fe:fb:03:a5:6f:27:05:15:46:
         45:c4:66:e7:9d:80:6f:36:13:0c:a7:99:27:b2:71:74:23:9f:
         41:0e:4c:41:31:ab:90:79:fe:82:8d:53:d8:50:94:1a:f4:d6:
         a1:37:c1:bd:42:60:c8:00:80:c2:fc:70:2d:c5:e5:83:a5:0b:
         5a:b9:af:44:49:c6:9f:95:02:41:f9:95:4b:10:4b:aa:bf:57:
         e2:32:52:d1:53:ea:1e:cc:c0:2f:f6:fd:2c:50:a8:d8:8d:ed:
         a7:6c:6d:d9:29:32:a7:69:5c:cb:b1:8b:59:97:9e:d1:ec:4d:
         a5:f9:ad:52:02:47:e5:53:3e:1f:6a:58:ac:9c:c9:69:99:eb:
         bf:b1:e8:85:69:77:7c:24:43:d9:f0:17:a4:2e:3c:c9:ce:c1:
         24:85:68:2a:22:db:f1:dd:3b:a9:8f:97:00:d6:2e:63:88:fa:
         27:bb:e5:8a:32:90:d7:c4:ee:58:92:09:15:c6:19:6f:c3:36:
         9e:1a:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----